Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37C119A9B0711F1BE7878E3CE1D38B0.roa
File:                     D37C119A9B0711F1BE7878E3CE1D38B0.roa (raw, json)
Hash identifier:          Dm7hFsdLEyzdmm1xz8KSTp40OG695Jt7ey5pMwLdFWM=
Subject key identifier:   61:24:07:D1:08:F5:68:60:2C:57:89:15:B7:98:29:40:B1:CD:25:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CDD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37C119A9B0711F1BE7878E3CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 13:22:14 +0000
ROA not before:           Tue 18 Aug 2026 13:22:10 +0000
ROA not after:            Fri 25 Sep 2026 13:22:10 +0000
asID:                     271355
IP address blocks:        156.236.194.0/24 maxlen: 24
                          156.236.196.0/24 maxlen: 24
                          156.236.197.0/24 maxlen: 24
                          156.236.198.0/24 maxlen: 24
                          156.236.199.0/24 maxlen: 24
                          156.236.200.0/24 maxlen: 24
                          156.236.210.0/24 maxlen: 24
                          156.236.211.0/24 maxlen: 24
                          156.236.212.0/24 maxlen: 24
                          156.236.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118233 (0x1cdd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 13:22:10 2026 GMT
            Not After : Sep 25 13:22:10 2026 GMT
        Subject: CN=6a845c86-0c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:d5:f1:7d:29:4a:7a:52:33:00:d9:26:92:
                    13:a3:99:c8:dc:31:d1:1a:8c:2c:74:38:e8:79:92:
                    54:bf:cf:a0:02:4d:ca:6d:52:f6:85:d4:5c:2d:d2:
                    86:92:08:21:10:ff:e3:08:e9:03:04:56:db:97:98:
                    11:93:d8:cd:24:87:99:45:f6:b8:b5:f6:26:09:b1:
                    ae:88:6c:5e:3e:bd:20:df:3a:76:42:77:4a:66:0a:
                    91:0b:3e:f7:1e:09:51:02:d4:78:c0:a0:f9:de:6a:
                    dd:aa:b7:e7:b6:ed:65:0e:17:93:9b:23:2d:4a:8d:
                    f0:12:38:07:00:45:e2:6b:40:8e:cd:2c:dd:9c:60:
                    74:27:08:d8:cb:90:e1:6b:37:01:d3:b8:99:48:3b:
                    17:f4:19:4f:1a:23:af:b6:bd:cf:10:9d:8f:16:81:
                    28:ca:bd:d0:45:09:c6:7a:a1:35:45:90:4a:eb:5b:
                    5e:79:ab:d3:26:d1:ae:c0:8f:17:36:05:a6:5b:9d:
                    d5:3c:8d:7e:fa:8d:d4:18:06:06:f2:f3:03:ff:81:
                    a4:d7:10:23:e6:d3:b5:4a:09:6e:fa:c5:de:84:11:
                    d0:37:da:1b:f8:e3:24:6d:9c:77:38:e6:18:b3:9d:
                    cf:86:ab:e9:b3:aa:6a:2d:2a:a6:21:ac:4b:ac:fd:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:24:07:D1:08:F5:68:60:2C:57:89:15:B7:98:29:40:B1:CD:25:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D37C119A9B0711F1BE7878E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.194.0/24
                  156.236.196.0-156.236.200.255
                  156.236.210.0-156.236.213.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:9e:88:89:d6:b5:99:70:2e:34:00:0e:d3:27:2b:69:f3:
         57:2a:96:0d:e4:b2:5e:86:98:64:57:cd:46:1b:92:18:78:e9:
         50:bd:9d:5a:f0:c0:d8:7d:2e:a6:31:94:be:56:b7:d4:a8:0e:
         67:fd:dc:ab:13:47:93:87:d5:e0:17:f6:12:ea:32:b8:56:5b:
         be:fa:ea:2e:c8:19:8b:62:4c:c8:01:2b:0d:d2:8b:de:cc:6a:
         7c:ce:34:8f:db:68:b4:f5:ab:a2:e8:a4:40:56:6e:c5:cf:9b:
         6d:61:f6:23:fa:e5:82:1f:11:d7:de:8d:0a:20:9e:8f:9c:71:
         f3:07:80:b5:de:ba:bd:eb:7a:e6:eb:74:76:b2:fe:63:f8:7c:
         78:d9:6b:af:45:37:36:42:81:e2:e2:e2:08:fa:fe:bb:9b:74:
         06:12:da:5a:c5:06:0b:6b:aa:cc:de:89:c4:66:4e:29:b0:23:
         8f:4f:12:3b:6b:a4:4f:ac:ee:2f:31:5c:4c:80:7f:f9:f3:ca:
         67:89:00:be:e5:ba:c9:11:f1:99:f6:73:4e:f9:6c:fe:41:73:
         94:19:be:02:3e:15:2f:35:59:37:9a:e9:8b:c7:d0:82:da:dd:
         ec:c6:6c:bc:0f:72:95:77:65:4c:53:92:7b:7f:78:01:4c:39:
         67:52:a7:ac
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAc3ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE4MTMyMjEwWhcNMjYwOTI1MTMyMjEwWjAYMRYw
FAYDVQQDEw02YTg0NWM4Ni0wYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqsLV8X0pSnpSMwDZJpITo5nI3DHRGowsdDjoeZJUv8+gAk3KbVL2hdRc
LdKGkgghEP/jCOkDBFbbl5gRk9jNJIeZRfa4tfYmCbGuiGxePr0g3zp2QndKZgqR
Cz73HglRAtR4wKD53mrdqrfntu1lDheTmyMtSo3wEjgHAEXia0COzSzdnGB0JwjY
y5DhazcB07iZSDsX9BlPGiOvtr3PEJ2PFoEoyr3QRQnGeqE1RZBK61teeavTJtGu
wI8XNgWmW53VPI1++o3UGAYG8vMD/4Gk1xAj5tO1Sglu+sXehBHQN9ob+OMkbZx3
OOYYs53Phqvps6pqLSqmIaxLrP0iRQIDAQABo4ICvjCCArowHQYDVR0OBBYEFGEk
B9EI9WhgLFeJFbeYKUCxzSW2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMzdDMTE5QTlCMDcxMUYxQkU3ODc4RTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAnOzCMAwDBAKc7MQDBACc7Mgw
DAMEAZzs0gMEAZzs1DANBgkqhkiG9w0BAQsFAAOCAQEAbSyeiInWtZlwLjQADtMn
K2nzVyqWDeSyXoaYZFfNRhuSGHjpUL2dWvDA2H0upjGUvla31KgOZ/3cqxNHk4fV
4Bf2EuoyuFZbvvrqLsgZi2JMyAErDdKL3sxqfM40j9totPWrouikQFZuxc+bbWH2
I/rlgh8R196NCiCej5xx8weAtd66vet65ut0drL+Y/h8eNlrr0U3NkKB4uLiCPr+
u5t0BhLaWsUGC2uqzN6JxGZOKbAjj08SO2ukT6zuLzFcTIB/+fPKZ4kAvuW6yRHx
mfZzTvls/kFzlBm+Aj4VLzVZN5rpi8fQgtrd7MZsvA9ylXdlTFOSe394AUw5Z1Kn
rA==
-----END CERTIFICATE-----